github/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-06 21:21:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

bluebubbles: harden local media path handling against LFI (#16322)

Browse Source 
* bluebubbles: harden local media path handling

* bluebubbles: remove racy post-open symlink lstat

* fix: bluebubbles mediaLocalRoots docs + typing fix (#16322) (thanks @mbelinky)
This commit is contained in:
Mariano
2026-02-14 17:43:44 +00:00
committed by GitHub
parent bfa7d21e99
commit 71f357d949
7 changed files with 417 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
src/config/zod-schema.providers-core.ts
View File

@@ -874,6 +874,7 @@ export const BlueBubblesAccountSchemaBase = z
textChunkLimit: z.number().int().positive().optional(),
chunkMode: z.enum(["length", "newline"]).optional(),
mediaMaxMb: z.number().int().positive().optional(),
mediaLocalRoots: z.array(z.string()).optional(),
sendReadReceipts: z.boolean().optional(),
blockStreaming: z.boolean().optional(),
blockStreamingCoalesce: BlockStreamingCoalesceSchema.optional(),